Test a container plugin signing service with PQC

[dralley]

The tooling at the moment is still a bit raw and experimental, but eventually we should have a test that uses a PQC key to sign manifests